CVE WatchJul 17, 2026

CVE-2024-23572

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this i

CVSS

4.2

Medium

EPSS

—

KEV

—

Exploit Today

0-100

Published: Jul 17, 2026 · Last modified: Jul 17, 2026 · CWE-614

EPSS · 30d

Not enough EPSS history yet.

Technical description

HCL Aftermarket EPC is vulnerable to attack as cookie appears to contain a session token, which may increase the risk associated with this issue. You should review the contents of the cookie to determine its function.

Official references

support.hcl-software.comhttps://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0132294

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-579486.8 MED

2.7%

——1Pinpoint through version 3.1.0 contains an insecure session management vulnerability that allows attackers to access the pinpointJwt session cookie due to missing HttpOnly and Secure attributes, enabling JavaScript access via document.cookie and cleartext transmission over HTTP. Attackers can exploit stored or reflected cross-site scripting vulnerabilities to exfiltrate the session token or intercept it through network sniffing to perform session hijacking.3d CVE-2026-16976.5 MED

2.0%

——1The Secure and SameSite attribute are missing in the GraphicalData web services and WebClient web app of PcVue in version 12.0.0 through 16.3.3 included.8d